Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cdf89ae-b7b8-46f6-8cec-0d697d61281f.roa
File:                     6cdf89ae-b7b8-46f6-8cec-0d697d61281f.roa (raw, json)
Hash identifier:          Ud0xhiq6CP4N365dxtozqeWg/89NVvVq46A75jTvUyM=
Subject key identifier:   95:AE:6E:5C:29:A7:05:F9:69:82:84:3C:0C:0A:56:C0:A5:0D:EB:ED
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       3857E1BCE61402C7FBE3146FA872A094AE327131
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cdf89ae-b7b8-46f6-8cec-0d697d61281f.roa
Signing time:             Wed 03 Apr 2024 00:00:00 +0000
ROA not before:           Wed 03 Apr 2024 00:00:00 +0000
ROA not after:            Wed 08 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        15.136.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:57:e1:bc:e6:14:02:c7:fb:e3:14:6f:a8:72:a0:94:ae:32:71:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Apr  3 00:00:00 2024 GMT
            Not After : May  8 23:59:59 2024 GMT
        Subject: serialNumber=9003936b11f3508874fb24fe3bb49758cea681b3d7e3973da028f702acb3460c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:66:f3:38:86:b5:1a:31:29:0a:f9:95:2a:
                    13:a5:23:d2:5e:6c:f2:e8:aa:7b:fa:09:1c:0a:84:
                    54:c5:77:10:b5:08:62:20:14:54:37:ae:f2:4c:52:
                    80:4e:d8:88:b0:fa:7a:00:9d:f4:19:52:3c:5a:4d:
                    e2:b7:bd:b3:f0:68:ad:f9:b2:2a:7d:7f:6e:8a:59:
                    00:6b:b3:9c:af:e8:8f:8e:59:93:f1:52:9c:b7:c0:
                    2f:dc:2b:77:57:17:ff:83:7a:cd:29:a6:9a:78:cf:
                    f3:e1:fe:f6:f1:1e:28:21:a3:0c:3d:00:62:04:12:
                    b4:06:48:0c:ff:ef:0f:31:ae:1f:4e:c0:c6:17:fb:
                    6c:45:ee:6c:7b:a4:be:fd:6a:39:a0:10:e3:2f:b2:
                    47:fa:58:20:9a:42:4d:c5:9f:24:b4:fe:47:1a:e6:
                    a4:01:77:75:38:4a:5d:c1:1c:0f:4f:b8:4d:e3:66:
                    1e:c8:94:d7:7f:9b:90:03:e7:c9:e0:0e:2b:d7:5e:
                    36:c2:cb:68:bd:15:23:c8:77:c2:3f:c3:03:27:75:
                    c4:83:d6:51:03:df:f0:3c:8d:5d:79:f2:e4:f3:a0:
                    55:82:a7:8f:29:31:99:9a:f6:85:11:28:57:a2:78:
                    98:c3:c6:74:f9:24:1b:04:e1:d8:7c:00:3e:3b:87:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AE:6E:5C:29:A7:05:F9:69:82:84:3C:0C:0A:56:C0:A5:0D:EB:ED
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6cdf89ae-b7b8-46f6-8cec-0d697d61281f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.136.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:1f:a9:15:4a:51:cf:c6:a5:4b:08:42:3a:56:b6:15:ea:9a:
         34:b9:c9:72:67:c3:7a:69:e7:7b:00:aa:68:60:72:93:23:d6:
         e5:a7:34:5e:dd:30:0e:0d:61:62:6a:7a:94:cd:b7:9d:34:8c:
         fa:94:77:77:9b:62:5c:fd:1c:01:6b:cf:3e:e8:c2:3a:56:23:
         1a:03:0c:b8:b0:a1:40:5c:d9:21:fb:84:3b:c7:f6:5a:53:a9:
         27:59:f4:34:18:06:df:63:a6:2f:ac:3e:e7:57:eb:b0:7a:24:
         54:a2:96:70:9d:e1:90:57:9f:a0:79:0c:b2:28:c7:79:00:23:
         89:a7:c3:01:d7:81:ee:4d:c6:ed:4e:8f:36:ba:30:cd:d7:59:
         29:15:77:e1:05:d5:29:bc:ba:62:3c:79:cc:b0:c5:65:ff:b4:
         5e:6e:fd:6d:7f:4d:db:95:9d:5c:65:de:50:34:b0:2d:cf:a1:
         78:03:31:82:f3:f5:eb:5f:7e:8f:de:be:fe:c8:ef:9e:4c:70:
         8c:d4:70:f5:8b:59:1b:37:39:10:71:74:99:d6:63:93:cc:f3:
         08:a5:c4:f1:23:52:be:25:06:7b:5a:93:75:ee:b2:e1:bb:5f:
         40:70:17:e4:86:66:e1:ec:74:e5:2f:30:e5:85:cb:e7:e9:47:
         a9:9f:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:31:29 2024 by rpki-client on console-fra.rpki-client.org